[next-6.6]Hygon: Support reuse ASID feature for Hygon CSV · Pull Request !156 · OpenCloudOS/OpenCloudOS-Kernel

1. patches
 **KVM: SVM: Add support for different CSV guests to reuse the same ASID** 
2. description
The number of ASIDs supported by Hygon 2nd and 3rd CPUs are only 15, that is, only 15 CSV virtual machines encrypted with different keys are supported. However, some deployment scenarios need to run more than 15 
encrypted virtual machines, which makes Hygon 2nd and 3rd CPUs difficult to meet the requirements. By reuse ASID feature, users can deploy a group of CSV virtual machines or CSV kata containers to share the same asid. This patch provides reuse asid support for the KVM module part, which requires you to add application code to userspace VMM, such as qemu.
3. test
3.1. before this patch
```
$ cnt=1; \
while [ $cnt -le 20 ]; do \
        dut_store=$(pwd)/csv_guest.qcow.$cnt; \ 
        qemu-img create \
                -f qcow2 -b /path/to/backing_img.qcow2 -F qcow2 $dut_store > /dev/null 2>&1 \
        echo "[boot $cnt th csv guest]"; \
        sudo $qemu_top_dir/bin/qemu-system-x86_64 \
                -enable-kvm -cpu host \
                -smp 6,maxcpus=128 \
                -m 2G,slots=5,maxmem=100G \
                -drive if=pflash,format=raw,unit=0,file=$(pwd)/OVMF_CODE.fd,readonly=on \
                -object sev-guest,id=sev0,policy=0x1,cbitpos=47,reduced-phys-bits=5 \
                -machine q35,memory-encryption=sev0 \
                -device virtio-scsi-pci,id=scsi0,disable-legacy=on,iommu_platform=on \
                -drive file=$dut_store,if=none,id=drive0 -device scsi-hd,drive=drive0,bootindex=1 \
                -vnc 0.0.0.0:0,to=90 \
        &; \
        let cnt++ \
done
[boot 1 th csv guest]
VNC server running on 0.0.0.0:5900
[boot 2 th csv guest]
VNC server running on 0.0.0.0:5901
[boot 3 th csv guest]
VNC server running on 0.0.0.0:5902
[boot 4 th csv guest]
VNC server running on 0.0.0.0:5903
[boot 5 th csv guest]
VNC server running on 0.0.0.0:5904
[boot 6 th csv guest]
VNC server running on 0.0.0.0:5905
[boot 7 th csv guest]
VNC server running on 0.0.0.0:5906
[boot 8 th csv guest]
VNC server running on 0.0.0.0:5907
[boot 9 th csv guest]
VNC server running on 0.0.0.0:5908
[boot 10 th csv guest]
VNC server running on 0.0.0.0:5909
[boot 11 th csv guest]
VNC server running on 0.0.0.0:5910
[boot 12 th csv guest]
VNC server running on 0.0.0.0:5911
[boot 13 th csv guest]
VNC server running on 0.0.0.0:5912
[boot 14 th csv guest]
VNC server running on 0.0.0.0:5913
[boot 15 th csv guest]
VNC server running on 0.0.0.0:5914
[boot 16 th csv guest]
qemu-system-x86_64: sev_kvm_init: failed to initialize ret=-16 fw_error=0 ''
qemu-system-x86_64: failed to initialize kvm: Operation not permitted
[boot 17 th csv guest]
qemu-system-x86_64: sev_kvm_init: failed to initialize ret=-16 fw_error=0 ''
qemu-system-x86_64: failed to initialize kvm: Operation not permitted
[boot 18 th csv guest]
qemu-system-x86_64: sev_kvm_init: failed to initialize ret=-16 fw_error=0 ''
qemu-system-x86_64: failed to initialize kvm: Operation not permitted
[boot 19 th csv guest]
qemu-system-x86_64: sev_kvm_init: failed to initialize ret=-16 fw_error=0 ''
qemu-system-x86_64: failed to initialize kvm: Operation not permitted
[boot 20 th csv guest]
qemu-system-x86_64: sev_kvm_init: failed to initialize ret=-16 fw_error=0 ''
qemu-system-x86_64: failed to initialize kvm: Operation not permitted
```
3.2. after this patch
```
$ cnt=1; \
while [ $cnt -le 20 ]; do \
        dut_store=$(pwd)/csv_guest.qcow.$cnt; \ 
        qemu-img create \
                -f qcow2 -b /path/to/backing_img.qcow2 -F qcow2 $dut_store > /dev/null 2>&1 \
        echo "[boot $cnt th csv guest]"; \
        sudo $qemu_top_dir/bin/qemu-system-x86_64 \
                -enable-kvm -cpu host \
                -smp 6,maxcpus=128 \
                -m 2G,slots=5,maxmem=100G \
                -drive if=pflash,format=raw,unit=0,file=$(pwd)/OVMF_CODE.fd,readonly=on \
                -object sev-guest,id=sev0,policy=0x81,cbitpos=47,reduced-phys-bits=5,user-id=testuserid1 \
                -machine q35,memory-encryption=sev0 \
                -device virtio-scsi-pci,id=scsi0,disable-legacy=on,iommu_platform=on \
                -drive file=$dut_store,if=none,id=drive0 -device scsi-hd,drive=drive0,bootindex=1 \
                -vnc 0.0.0.0:0,to=90 \
        &; \
        let cnt++ \
done
[boot 1 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55fb11d190e0]: testuserid1,11
VNC server running on 0.0.0.0:5900
[boot 2 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55e5488840e0]: testuserid1,11
VNC server running on 0.0.0.0:5901
[boot 3 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x556bb87850e0]: testuserid1,11
VNC server running on 0.0.0.0:5902
[boot 4 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x561cbde3c0e0]: testuserid1,11
VNC server running on 0.0.0.0:5903
[boot 5 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55ebb9d020e0]: testuserid1,11
VNC server running on 0.0.0.0:5904
[boot 6 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x561b1a51c0e0]: testuserid1,11
VNC server running on 0.0.0.0:5905
[boot 7 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x563b661ab0e0]: testuserid1,11
VNC server running on 0.0.0.0:5906
[boot 8 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55f78a5e80e0]: testuserid1,11
VNC server running on 0.0.0.0:5907
[boot 9 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x564b092d40e0]: testuserid1,11
VNC server running on 0.0.0.0:5908
[boot 10 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x5609794b80e0]: testuserid1,11
VNC server running on 0.0.0.0:5909
[boot 11 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55e04deeb0e0]: testuserid1,11
VNC server running on 0.0.0.0:5910
[boot 12 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55cc767ee0e0]: testuserid1,11
VNC server running on 0.0.0.0:5911
[boot 13 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x559b1d00e0e0]: testuserid1,11
VNC server running on 0.0.0.0:5912
[boot 14 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x5556ad2470e0]: testuserid1,11
VNC server running on 0.0.0.0:5913
[boot 15 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55dbe216b0e0]: testuserid1,11
VNC server running on 0.0.0.0:5914
[boot 16 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x55645746e0e0]: testuserid1,11
VNC server running on 0.0.0.0:5915
[boot 17 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x56433c8b10e0]: testuserid1,11
[boot 18 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x559a6afe40e0]: testuserid1,11
VNC server running on 0.0.0.0:5916
[boot 19 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x555f39da10e0]: testuserid1,11
VNC server running on 0.0.0.0:5917
[boot 20 th csv guest]
qemu-system-x86_64: info: sev_kvm_init: user_id[0x5626244ed0e0]: testuserid1,11
VNC server running on 0.0.0.0:5918
VNC server running on 0.0.0.0:5919
```

类型	指派人员	状态
审查	chinaljp030 刘诗	已完成 (0/0人)
测试	chinaljp030 刘诗	已完成 (0/0人)

GVPOpenCloudOS/OpenCloudOS-Kernel

搜索帮助

GVP OpenCloudOS/OpenCloudOS-Kernel